Is there a way to use a report as a base search for subsequent chain searches?

[Allene139]

I am creating a dashboard for my team. So far, I've been able to implement chain searches by modifying the source code. However, they are based on a live base search. My goal is to power the base searches off of a report instead of a live search. Is that possible?

[bowesmana · Accepted solution]

@Allene139 

Yes, just use this

<search ref="report_name">
...
</search>

See the documentation here

https://docs.splunk.com/Documentation/Splunk/8.1.2/Viz/PanelreferenceforSimplifiedXML#search

[Allene139]

Thank you very much